Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: /o7TWw8SA/PVSG+oFQ3eNoRkOsIbN8FSkxCA43mV7aQ=
Subject key identifier: 5E:59:36:E9:16:F5:1A:6C:1C:AD:40:A0:BF:2A:32:38:68:DB:28:CF
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 0196B9A45F9F3B020A94824A38926ECB8186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 087E
Signing time: Sat 10 May 2025 10:01:19 +0000
Manifest this update: Sat 10 May 2025 10:01:19 +0000
Manifest next update: Sun 11 May 2025 10:01:19 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: YluY+rNbdVZ0LBSkzu8QLcqozKMbtYe/WqJn3SqFJbs=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:5f:9f:3b:02:0a:94:82:4a:38:92:6e:cb:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: May 10 10:01:19 2025 GMT
Not After : May 11 10:01:19 2025 GMT
Subject: CN=5e5936e916f51a6c1cad40a0bf2a323868db28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:26:ab:b7:48:8e:6e:7d:d3:c0:28:92:d9:
12:9a:bf:50:cb:d9:f3:64:7a:a2:2e:90:f0:34:09:
9f:2a:bf:ad:cf:6d:96:18:9b:68:6a:e2:bc:33:7e:
67:4a:dd:7b:66:90:f6:5c:f7:79:60:1b:61:32:11:
59:08:f4:99:20:6f:73:67:09:06:85:d5:7e:ea:c0:
e3:1e:87:48:38:50:2c:24:d8:42:7a:cd:67:43:da:
ca:1c:65:2f:3f:97:a4:81:a5:4a:57:32:fd:d1:8a:
0c:8f:c7:8e:05:8f:29:b6:69:f8:8f:c8:21:d2:19:
b9:e9:5d:45:b9:da:88:03:dd:0b:23:ed:96:2a:5c:
39:e8:54:6d:bb:a4:38:a8:df:f5:0b:04:62:52:cf:
89:a3:7d:6f:19:51:a0:78:da:13:55:22:6f:40:ff:
e2:08:91:98:a5:96:a9:aa:72:90:6b:63:ed:10:21:
25:e4:3c:11:ac:8c:29:74:97:0a:37:e9:6e:81:25:
70:0b:83:5e:f9:74:8e:a1:e5:a0:ff:61:de:e4:65:
e8:8e:6b:1a:8b:83:23:8f:2e:e2:33:64:e5:44:dc:
b4:35:5b:b3:b1:a5:63:55:47:db:c4:8a:88:0f:68:
9c:3a:87:fb:3f:17:16:0a:24:0b:7d:b8:9b:cc:76:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:36:E9:16:F5:1A:6C:1C:AD:40:A0:BF:2A:32:38:68:DB:28:CF
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1a:96:02:27:42:66:30:02:94:ef:0d:ff:f2:bf:98:9c:71:
1e:a9:82:98:76:3b:bb:f4:c0:82:97:e8:2d:01:e6:2e:61:8f:
43:eb:13:e4:a7:8b:7f:91:33:b9:b2:0e:c9:90:aa:65:f5:c3:
dc:9d:3f:fc:a3:b5:74:1b:0f:30:96:e2:68:cc:9a:c7:b6:56:
e1:f8:76:4c:34:9e:f0:62:da:7d:f7:ac:55:52:78:c5:3f:8a:
a0:50:2d:45:c8:69:ac:18:2c:4d:f7:c5:d2:9a:7b:ac:83:53:
b6:69:15:82:e1:87:a7:11:99:4c:97:93:56:e9:b6:c0:d9:4a:
54:04:47:ee:aa:92:b9:25:d4:c8:ca:2f:98:e8:ee:f6:9d:a9:
2c:28:bb:a6:f8:ec:6b:2f:bd:06:17:a1:85:48:d4:5d:63:80:
cd:a0:0e:e9:95:8b:18:6f:9b:b8:61:dc:75:f5:9d:02:eb:3c:
f5:7d:57:45:3a:82:cf:fe:71:2b:9e:5a:4b:0a:2a:19:fa:5a:
db:6c:61:bc:1f:a6:c5:18:a1:f7:09:30:22:f2:08:34:d8:fd:
c2:0b:8e:1e:90:eb:d9:61:37:d4:bc:1b:c0:e7:a0:0f:b4:63:
9e:26:67:ca:1a:c5:f8:b7:97:f1:40:c9:99:0a:8f:14:a6:aa:
b3:f8:a3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pF+fOwIKlIJKOJJuy4GGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl
MzM3NzIwHhcNMjUwNTEwMTAwMTE5WhcNMjUwNTExMTAwMTE5WjAzMTEwLwYDVQQD
Eyg1ZTU5MzZlOTE2ZjUxYTZjMWNhZDQwYTBiZjJhMzIzODY4ZGIyOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrMmq7dIjm5908AoktkSmr9Qy9nz
ZHqiLpDwNAmfKr+tz22WGJtoauK8M35nSt17ZpD2XPd5YBthMhFZCPSZIG9zZwkG
hdV+6sDjHodIOFAsJNhCes1nQ9rKHGUvP5ekgaVKVzL90YoMj8eOBY8ptmn4j8gh
0hm56V1FudqIA90LI+2WKlw56FRtu6Q4qN/1CwRiUs+Jo31vGVGgeNoTVSJvQP/i
CJGYpZapqnKQa2PtECEl5DwRrIwpdJcKN+lugSVwC4Ne+XSOoeWg/2He5GXojmsa
i4Mjjy7iM2TlRNy0NVuzsaVjVUfbxIqID2icOof7PxcWCiQLfbibzHY4bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5ZNukW9RpsHK1AoL8qMjho2yjPMB8GA1UdIwQY
MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt
NzNhMTU3YTJiOTlmLzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm
LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBqWAidC
ZjAClO8N//K/mJxxHqmCmHY7u/TAgpfoLQHmLmGPQ+sT5KeLf5EzubIOyZCqZfXD
3J0//KO1dBsPMJbiaMyax7ZW4fh2TDSe8GLaffesVVJ4xT+KoFAtRchprBgsTffF
0pp7rINTtmkVguGHpxGZTJeTVum2wNlKVARH7qqSuSXUyMovmOju9p2pLCi7pvjs
ay+9BhehhUjUXWOAzaAO6ZWLGG+buGHcdfWdAus89X1XRTqCz/5xK55aSwoqGfpa
22xhvB+mxRih9wkwIvIINNj9wguOHpDr2WE31LwbwOegD7RjniZnyhrF+LeX8UDJ
mQqPFKaqs/ijFQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:17:18 2025 by rpki-client